Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/013aaf11-83ca-3c3b-b7db-96cbfc78f435.roa
File:                     013aaf11-83ca-3c3b-b7db-96cbfc78f435.roa (raw, json)
Hash identifier:          mo6ut8YQx/qhxl1EOXXWHQCqVupsRefsunfvlEU38vU=
Subject key identifier:   32:6D:BB:C9:E5:9E:F0:B9:EF:31:EE:B2:E6:2F:AA:1E:9F:53:BD:E8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404768A2A044465207224E4700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/013aaf11-83ca-3c3b-b7db-96cbfc78f435.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.177.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:68:a2:a0:44:46:52:07:22:4e:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=e0309052-05c7-4591-b10a-5b05cb200de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:09:2a:78:49:43:28:38:d4:14:f4:13:d8:
                    6a:7f:7d:c3:d6:49:09:b7:ff:19:ff:21:37:b3:43:
                    bd:ca:a8:d5:d5:54:e3:0a:f6:0c:15:ea:36:a3:a4:
                    31:27:2d:86:78:48:de:2b:51:94:cb:af:ed:50:1b:
                    e9:fa:dc:53:34:76:4b:f7:09:e9:d0:84:61:ed:06:
                    86:67:7a:7a:1f:c9:e3:de:65:d2:b2:89:94:db:b3:
                    1e:61:19:12:b2:69:d4:2f:a3:33:8b:04:63:0c:5e:
                    7d:4c:79:cc:ad:1c:c9:88:51:32:b9:db:fa:98:e4:
                    d1:db:7e:19:f7:db:de:1c:16:6c:10:39:49:d0:c5:
                    d9:f9:81:b2:6c:57:4b:b1:e2:b7:cf:c6:81:d7:b4:
                    89:15:6b:ac:9d:68:e5:d4:fd:c6:1a:b9:07:5b:78:
                    73:2b:7d:f0:28:4e:76:28:9b:39:4c:03:2b:93:3f:
                    d3:7e:79:db:70:eb:6a:82:3b:21:77:19:cf:8d:bf:
                    61:52:07:4d:65:7a:9d:fb:9f:f7:40:bd:9d:c9:72:
                    50:cb:4a:16:b8:82:e2:0d:16:33:41:85:35:c2:89:
                    75:05:45:66:8b:2b:63:b5:0a:fd:83:7d:4b:8f:1a:
                    d6:71:32:a7:c1:d5:58:98:97:70:62:bb:3e:73:c3:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:BB:C9:E5:9E:F0:B9:EF:31:EE:B2:E6:2F:AA:1E:9F:53:BD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/013aaf11-83ca-3c3b-b7db-96cbfc78f435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:3a:f3:4f:2b:81:18:db:0d:c5:ef:b1:ca:4b:31:5e:97:
         f9:25:3c:b9:c4:f5:b2:5a:71:63:1b:2b:2b:29:23:de:8a:02:
         c5:3f:0a:66:d6:5f:35:2f:cc:d5:34:7c:59:f0:bc:8d:63:d4:
         12:8a:8c:7b:d1:2a:41:12:1f:fa:f2:ee:89:49:e5:78:ab:62:
         93:ce:d0:e0:b2:c1:0a:c3:cf:4b:ae:26:76:9f:74:c7:d8:c6:
         ac:87:ae:4f:57:4d:10:fd:f4:8b:21:68:49:3f:04:42:4d:bf:
         83:c9:76:96:35:b3:31:fb:68:b7:96:e9:1b:08:0e:c0:dc:bd:
         fa:41:2e:3d:2c:73:0f:7f:b3:fc:35:d9:81:2c:f6:c1:3c:56:
         e7:f3:31:82:2e:1e:b2:97:a2:ff:b0:fe:45:32:3e:42:85:51:
         3a:8b:f3:95:94:74:c0:d4:e2:9d:53:97:b1:3e:07:ea:1b:c2:
         9c:9c:1d:33:36:27:5a:27:b8:c8:2a:7b:3d:c9:16:84:be:94:
         ac:55:eb:ca:2c:e2:52:71:f4:27:46:03:26:b7:6a:fb:11:c0:
         15:0d:04:1f:f9:4e:06:79:46:b1:fb:aa:cd:f3:52:24:19:e2:
         bc:5b:2b:60:68:b7:2e:52:e2:de:e0:a5:49:f1:85:69:56:6c:
         02:4b:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----